AMENDMENTS TO THE CLAIMS: 



I. (Currently Amended) A method of managing risk related to a successful 
completion of a development project, comprising: 

storing a probability of occurrence (Pf) table having a plurality of risk categories 
for the development project , each said category having a plurality of table entries, each 
entry including a category-specific standardized qualitative probability definition 
associated with a Pf rating and a severity of consequence (CO table, and identified risks 
in a shared risk database; and 

via a web browser, a plurality of users, 

formulating an enterprise search of the risk database to identify at least 

one risk, 

viewing the Pf table to select the one or more risk categories for said at 
least one risk and for each said category selects the qualitative probability definition that 
characterizes the risk thereby specifying a probability of occurrence Pf for each said risk 
category for said at least one risk; and 

viewing the Cf table to select a severity of consequence Cf for said at least 
one risk, said Pf and Cf being combined and ranked to define prioritized risk factors Rf; 

formulating a risk mitigation plan including at least one mitigation activity for 
said at least one risk, said risk mitigation plan having an associated risk exposure based 
on the risk factors Rf for said at least one risk; 

performing the at least one mitigation activity for said at least one risk to 
implement the risk mitigation plan; 

as the risk mitigation plan is implemented over time, at least one said user 
viewing the Pf and Cf tables to reassess the at least one risk, select Pf and Cf and update 
the prioritized risk factor Rf; 

displaying a chart of risk exposure over time; and 

adjusting the mitigation plan based on the risk exposure . 
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2. (Currently Amended) The method of claim 1, wherein the severity of 
consequence table has cost and schedule impact categories, each said category having a 
plurality of table entries, each entry including a standardized qualitative impact definition 
and a project-specific amount associated with a Cf rating , wherein the users view the cost 
and schedule impact categories and the standardized qualitative impact definitions for 
each said at least one risk to select the Cf rating, said displayed risk exposure including a 
cost exposure and a schedule exposure that are based on the project-specific amounts 
associated with the selected Cf rating , 

3. (Currently Amended) The method of claim I, further comprising a user having 
administrative access not provided to said plurality of users first tailoring the probability 
of occurrence table via the web browser to &e select a reduced number of categories that 
are relevant to the current development project and storing the tailored probability of 
occurrence table on the shared risk database with access to said plurality of users. 

4. (Currently Amended) The method of claim 2, wherein the table entries in the 
schedule impact category specify a project-specific amount in days, weeks or months and 
the table entries in the cost impact category include multiple sub-categories of project- 
specific cost impacts in actual dollars for the development projec t the user selecting a Cf 
rating for each said sub-category , 

5. (Currently Amended) The method of claim 4 2, wherein said multiple sub- 
categories include development cost (NRE), unit cost (DTC) and operations and support 
(O/S) categories , said displayed cost exposure including sub-categories for NRE, DTC 
and O/S . 

6. (Previously Presented) The method of claim 4, further comprising a user having 
administrative access not provided to said plurality of users first tailoring the severity of 
consequence table to select the cost impact sub-categories and specify their dollar 
amounts and to specify the schedule impact in days, weeks or months for the current 
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development project and storing the tailored probability of occurrence table on the shared 
risk database with access to said plurality of users. 

7. (Original) The method of claim I, wherein the enterprise search includes a 
combination of at least two parameters including current or historic, risk factor, vendor, 
component, functional area, category, key work in risk title, key work in risk description, 
IPT, actionee, actionee/team lead/submitter or risk number. 

8. (Original) The method of claim 7, wherein the enterprise search results list at 
least one risk including a combination of risk number, program, risk title and a current 
risk factor. 

9. (Previously Presented) The method of claim 29, wherein the web browser 
provides a transfer link from said at least one risk with its risk mitigation plan to import 
the selected risk and mitigation plan into another program. 

10. (Previously Presented) The method of claim 29, wherein in the mitigation search 
includes a combination of at least two parameters including a risk description, risk status, 
start date, original planned complete date, planned complete date and complete date. 

1 1 . (Previously Presented) The method of claim 29, further including automatically 
generating risk reports including identified risks, prioritized risk factors and mitigation 
plans. 

12. (Previously Presented) The method of claim 11, wherein a risk review board 
(RRB) report is generated by; 

submitting minutes for a RRB meeting by entering information for each risk 
covered during a RRB meeting and entering the date of the RRB meeting; and 

submitting the minutes to generate the RRB report including Number, Title, 
Actionee, Rf, Risk Level and Comments for each risk. 
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13. (Previously Presented) The method of claim 29, wherein the web browser has an 
interface that includes a menu bar with pull-down menu items and menu sub-items for 
viewing the current program, conducting the enterprise search and conducting the 
mitigation search and hyperlinks to the Pf and Cf tables. 

14. (Previously Presented) The method of claim 29, wherein the identified risks, risk 
factors and mitigation plans for each user are stored in the shared risk database. 

15-18. cancelled 

19. (Previously Presented) A web-based risk management system for managing risk 
related to a successful completion of a development project, comprising: 

a server comprising a shared risk database that stores a probability of occurrence 
(Pf) table having a plurality of risk categories for the development project; each said risk 
category having a plurality of table entries, each entry including a category-specific 
standardized qualitative probability definition associated with a Pf rating and a severity of 
consequence (Cf) table, risk identification information and risk mitigation information; 

a web-based risk management tool on the server that provides standardized 
interfaces for searching, viewing and entering information to and from the shared risk 
data base via a web browser; 

an intranet a communications network ; and 

a plurality of computer workstations in communication with the server via the 
communications network intranet , each said workstation provided with a web browser to 
search the database using the standardized interfaces to identify risks and risk categories 
for each identified risk , to select entri e s an entry and its Pf rating from the Pf table for 
each risk category and an entry and its Cf rating from the Cf table tab le s and to calculate 
and priorit ize a risk factor Rf for each risk based on the Pf and Cf ratings . 

20. (Previously Presented) The system of claim 34, wherein the tool's standardized 
interface includes a menu bar with pull-down menu items and menu sub-items to view 
the current programs, to view program risks, to conduct an enterprise search to identify 
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risks and to formulate the risk mitigation search to identify mitigation plans and 
hyperlinks to the Pf and Cf tables. 

21. (Previously Presented) The system of claim 19, wherein the Cf table has a 
schedule impact category with table entries, each entry including a standardized 
qualitative impact definition and a project-specific schedule impact amount in days, 
weeks or months and having a cost impact category with table entries, each entry 
including a standardized qualitative impact definition and project-specific cost impact 
amounts for multiple sub-categories of cost impacts in actual dollars for the development 
project, said web browser providing administrative access to at least one user to tailor the 
Pf table to have fewer categories that are relevant to the current project and the Cf table 
to specify the amounts in days, weeks or months of the table entries in the schedule 
impact category and the amounts in actual dollars for the multiple sub-categories in the 
cost impact category a said web browser providing access to a user to select Cf ratings for 
each of the schedule impact and the multiple sub-categories of cost impacts, said risk 
management tool computing and displaying a schedule exposure based on Pf and the Cf 
rating for schedule impact and a cost exposure for each sub-category based on Pf and the 
Cf rating for each said sub-category , 

22. (Previously Presented) The system of claim 34, wherein the workstation via the 
web browser submits an enterprise search that includes a combination of at least two 
parameters including current or historic, risk factor, vendor, component, functional area, 
category, key word in risk title, key word in risk description, IPT, actionee, actionee/team 
lead/submitter or risk number and the server returns via the web browser an enterprise 
search results list including for at least one risk a combination of risk number, program, 
risk title, a current risk factor and its risk mitigation plan. 

23. (Previously Presented)The system of claim 34, wherein the workstation via the 
web browser submits a mitigation search that includes a combination of at least two 
parameters including a risk description, risk status, start date, original planned complete 
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date, planned complete date and complete date and the server returns existing mitigation 
plans that satisfy the search parameters. 

24. (Previously Presented)The system of claim 34, wherein the workstations 
automatically submit identified risks, risk factors and mitigation plans to the shared 
database, said server automatically generating risk reports including identified risks, 
prioritized risk factors and mitigation plans for the current project, 

25-28 cancelled 

29. (Currently Amended) The method of claim 1, wherein existing risk mitigation 
plans including one or more mitigation activities for different risks are stored in the 
shared database, further the formulation of the risk mitigation plane comprising: 

formulating a mitigation search of the risk database to identify existing risk 
mitigation plans for the identified risk; 

formulating a new risk mitigation plan that's builds upon the one or more existing 
risk mitigation plans; and 

storing the new risk mitigation plan on the shared databases-ami 

i mplementing the new risk mitigati o n pl a n . 

30. (Previously Presented) The method of claim 29, wherein the mitigation search 
identifies both successful and unsuccessful existing risk mitigation plans. 

31 . (Previously Presented) The method of claim 29, further comprising: 
aggregating the risk mitigation plans from a plurality of different users and 

different programs to update and store a risk mitigation plan on the shared database. 

32. (Previously Presented) The method of claim 29, further comprising: 
sharing resources with other programs to implement the mitigation plan. 
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33. (Previously Presented) The method of claim 29, where the risk mitigation plan 
includes a number of activities, each activity including a description and an assigned Pf 
and Cf rating. 

34. (Currently Amended) The system of claim 19, wherein existing risk mitigation 
plans including mitigation activities for different risks are stored in the shared database, 
said web browser configured to formulate a mitigation search of the risk database to 
identify existing risk mitigation plans for the identified risk, formulate a new risk 
mitigation plan that' s builds upon the one or more existing risk mitigation plans, and 
store the new risk mitigation plan on the shared database , said risk mitigation plan having 
an associated risk exposure based on the risk factors Rf> display a chart of risk exposure 
over time and facilitate adjustments to the mitigation plan based on the risk exposure . 

35. (Previously Presented) The system of claim 34, wherein the mitigation search 
identifies both successful and unsuccessful existing risk mitigation plans. 

36. (Previously Presented) The system of claim 34, wherein the web browser 
facilitates sharing resources with other programs to implement the mitigation plan. 

37. (New) The method of claim I , wherein the risk exposure is the sum of severity of 
consequence associated with the Cf rating multiplied by the probability Pf for each said 
risk. 

38. (New) The method of claim 2, wherein the user selects a Cf rating for each of the 
cost and schedule impact categories, said respective Cf ratings used to determine the 
displayed cost exposure and schedule exposure. 

39. (New) The method of claim 38, wherein the maximum Cf rating is combined with 
Pf to define the prioritized risk factor Rf. 
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40. (New) The method of claim 5, wherein the user selects a Cf rating for each of the 
NRE, DTC and O/S cost impact sub-categories, said respective CF ratings used to 
determine the displayed cost exposure for the different sub-categories. 

41. (New) A web-based risk management system for managing risk related to a 
successful completion of a development project, comprising: 

a server comprising a shared risk database that stores a probability of occurrence 
(Pf) table having a plurality of risk categories for the development project, each said risk 
category having a plurality of table entries, each entry including a category-specific 
standardized qualitative probability definition associated with a Pf rating and a severity of 
consequence (Cf) table having cost and schedule impact categories each having a 
plurality of table entries, each entry including a standardized qualitative impact definition 
and a project-specific amount associated with a Cf rating, risk identification information 
and risk mitigation information; 

a web-based risk management tool on the server that provides standardized 
interfaces for searching, viewing and entering information to and from the shared risk 
data base via a web browser; 

a communications network; and 

a plurality of computer workstations in communication with the server via the 
communications network, each said workstation provided with a web browser configured 
to search the database using the standardized interfaces to identify risks and risk 
categories for each identified risk, to select a Pf rating for each risk category and cost and 
schedule Cf ratings, calculate and prioritize a risk factor Rf for each risk based on the Pf 
and Cf ratings and to formulate a risk mitigation plan including at least one mitigation 
activity for said at least one risk, said risk mitigation plan having an associated cost 
exposure and schedule exposure based on the Pf and Cf ratings, 

as the risk mitigation plan is implemented over time, said tool via the web- 
browser configured to display a chart of the cost exposure and schedule exposure over 
time, display the Pf and Cf tables to reassess the at least one risk and select Pf and Cf to 
update the prioritized risk factors Rf and adjust the mitigation plan based on the cost or 
schedule exposure. 
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42. (New) The system of claim 41, wherein the cost impact category includes 
multiple sub-categories each having a project-specific amount, each said sub-category 
being assigned its own Cf ratings, said respective CF ratings used to determine the 
displayed cost exposure for the different sub-categories. 

43. (New) The system of claim 42, wherein the sub-categories include development 
cost (NRE), unit cost (DTC) and operations and support (O/S). 

44. (New) The system of claim 41, wherein the maximum Cf rating for the multiple 
sub-categories is combined with the maximum Pf for the one or more risk categories to 
define the prioritized risk factor Rf. 
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